Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4vm6-24h2-hx93

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.4

Описание

OnCommand Unified Manager for 7-Mode (core package) prior to 5.2.4 uses cookies that lack the secure attribute in certain circumstances making it vulnerable to impersonation via man-in-the-middle (MITM) attacks.

OnCommand Unified Manager for 7-Mode (core package) prior to 5.2.4 uses cookies that lack the secure attribute in certain circumstances making it vulnerable to impersonation via man-in-the-middle (MITM) attacks.

EPSS

Процентиль: 32%
0.00124
Низкий

7.4 High

CVSS3

Дефекты

CWE-311

Связанные уязвимости

CVSS3: 7.4
nvd
около 7 лет назад

OnCommand Unified Manager for 7-Mode (core package) prior to 5.2.4 uses cookies that lack the secure attribute in certain circumstances making it vulnerable to impersonation via man-in-the-middle (MITM) attacks.

EPSS

Процентиль: 32%
0.00124
Низкий

7.4 High

CVSS3

Дефекты

CWE-311